Privacy policy.

1. Who this covers

This policy explains how Two Cores Ltd collects and uses personal information when you visit Signal Mail, submit a brief, communicate with us, or use the service. Two Cores Ltd is the data controller for that information.

2. What we collect

Information you give us

This may include your name, work email, company, offer, target audience, message, and an uploaded business prospect list. Please do not upload private home addresses or sensitive personal information.

Campaign and website information

We record campaign source parameters in session storage so an enquiry can be connected to the route that produced it. If you accept optional measurement, Google Analytics 4 and the Meta Pixel may also process information about pages viewed, actions taken, device and browser details, approximate location, and campaign identifiers.

Business direct-mail information

For agreed business-to-business work, we may use a person's name, business role, company, company office address, public business facts, source records, approval status, delivery status, response activity, and opt-out status.

3. Why we use it

• To reply to enquiries and scope a possible campaign.
• To enter into and deliver a contract with a client.
• To research, write, produce, deliver, and evaluate agreed business direct mail.
• To operate, secure, and improve this website and service.
• With your consent, to measure marketing performance and advertising conversions.
• To meet legal, accounting, and regulatory obligations.

Our legal bases can include taking steps at your request before a contract, performing a contract, complying with legal obligations, legitimate interests in operating and marketing the business, and consent for optional analytics. We assess legitimate interests for direct marketing and respect objections and opt-outs.

4. Uploaded lists and research

Clients must have a lawful basis for supplying prospect information and must identify any exclusions or suppression requirements. We use supplied lists only for scoping or delivering the agreed work. Research is limited to relevant business information from appropriate public sources. No item is produced or posted until the client has approved the scope and proofs.

5. Cookies and browser storage

The site stores your analytics choice and session campaign attribution. Google Analytics 4 and the Meta Pixel load only after you accept optional measurement. You can reopen Cookie choices from the footer and change your choice.

6. Who processes information

We use service providers to host the website, receive forms, manage business systems, research companies, print and fulfil mail, deliver web fonts, and measure campaigns. Depending on the agreed route and your choices, these may include Netlify, Google, Meta, and specialist print or mail providers. Providers process information under contract or their own terms. Some processing may occur outside the United Kingdom using recognised safeguards where required.

7. Retention and security

We keep enquiry, upload, and client information only as long as needed for its purpose, appropriate business records, and legal obligations. We use proportionate technical and organisational safeguards, but no internet transmission or storage method is completely secure.

8. Your rights

UK data protection law may give you rights to access, correct, erase, restrict, or object to the use of your information, and to request a portable copy. You can object to direct marketing at any time. To make a request, email team@twocores.com. You can also complain to the UK Information Commissioner's Office through its complaints service.